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Top Stories 

• Target Corp. stated March 13 that security software detected potentially malicious activity 
that led to the 2013 breach of 40 million payment card records but that its staff decided not 
to take immediate action. - Reuters (See item 8) 

• 149 passengers and 5 crew members were evacuated from a U.S. Airways flight at a 
Philadelphia airport by emergency chute after a tire blew and the nose gear collapsed 
during takeoff. - Reuters (See item 13 ) 

• John Adams Elementary School in Alexandria, Virginia, closed March 14 after about 230 
students and staff members came down with a stomach illness. - WTOP 103.5 FM 
Washington D.C .( See item 20 ) 

• Security researchers identified vulnerabilities in major Web browsers and other popular 
software during the two-day Pwn20wn 2014 computer security competition. - Help Net 
Security (See item 23 ) 
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Energy Sector 



1. March 13, Steubenville Herald-Star - (Ohio) Gas leak at private well forces 
evacuation. State Route 152 and a nearby railroad line were ordered to close after a 
leak at a private natural gas well forced the evacuation of about 30 families in Jefferson 
County, Ohio, March 13. The Ohio Department of Natural Resources sent crews to 
assist with the well repair. 

Source: http://www.hsconnect.com/page/content.detail/id/596388/Gas-leak~at-private- 
well-forces— evacuation.html 

2. March 13, Green Bay Press-Gazette - (Wisconsin) WPS shutting down Green Bay 
plant’s oldest coal-fired generators. J.P. Pulliam Plant Units 5 and 6 in Green Bay 
will be shut down, officials at Wisconsin Public Service Corp., stated March 12, as the 
result of an agreement with the U.S. Environmental Protection Agency to repower, 
refuel, or retire older units that produce high emissions of sulfur dioxide and nitrogen 
oxide. 

Source: http://www.greenbaypressgazette.com/article/20140312/GPG0101/303 120372/ 
WPS-shutting-down-Green-Bay-plant-s-oldest-coal-fired-generators 

3. March 13, WECT 6 Wilmington; Associated Press - (North Carolina) Duke Energy 
closing coal ash pond at Sutton Plant. Duke Energy officials submitted plans to close 
its Sutton Steam Electricity Plant in New Hanover County, in addition to moving three 
leaky coal ash pits away from North Carolina waterways. The utility proposed an 
action plan following a February 2 leak of toxic materials at its Dan River location. 
Source: http://www.wect.com/storv/24972145/duke-energy-closing-coal-ash-pond-at- 
sutton-plant 
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Chemical Industry Sector 

4. March 13, WZZM 13 Grand Rapids - (Michigan) Chemical reaction contained at 
Grand Rapids plant. HAZMAT crews responded to a Haviland facility in Grand 
Rapids March 13 after a chemical reaction during a mixing process sent a chemical 
cloud into the air. Plant employees were evacuated and officials issued a precautionary 
shelter-in-place order for nearby residents and workers. 

Source: http://www.wzzml3.com/story/news/local/grand-rapids- 
west/2014/03/13/chemical-fire-haviland-ann-street-grand-rapids-hazmat/6364837/ 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 



5. March 13, Cars.com - (National) Recall alert: 2011-2012 Dodge Charger. Chrysler 
announced a recall of around 43,450 model year 2011 and 2012 Dodge Charger 
vehicles equipped with halogen headlamps due to the potential for jumper harnesses 
and other headlight components to overheat. 

Source: http://www.chicagotribune.com/classified/automotive/sns-recall-alert-201 1- 
20 1 2-dodge-charger-20 1 403 1 3 ,0,4253494 .story 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

6. March 14, WTSP 10 St. Petersburg - (Florida) More than 330 credit cards 
compromised by skimmers at Wesley Chapel Hess gas station. The Pasco Sheriff’s 
Office reported finding skimming devices installed inside two gas pumps at a Hess gas 
station in Wesley Chapel which compromised 337 credit cards sometime during March 
6-8. Detectives stated that the incident is connected to another skimming incident that 
occurred February 21 in Hernando. 

Source: http://www.wtsp.com/news/local/article/360199/8/More-than-330-credit-cards- 
compromised-by-skimmers-at-Pasco-gas-station 

7. March 14, WRAL 5 Raleigh - (North Carolina) ‘Check Washing Bandit’ caught. A 
suspect known as the “Check Washing Bandit” was arrested in Fayetteville and held 
March 13 and charged with allegedly stealing checks and changing the payee name. 

The suspect allegedly stole at least $10,000 by cashing the altered checks. 

Source: http://www.wral.com/-check-washing-bandit-caught/13476935/ 

8. March 13, Reuters - (National) Target says it declined to act on early alert of cyber 
breach. Target Corp. stated March 13 that security software detected potentially 
malicious activity that led to the breach of 40 million payment card records and 70 
million customer records but that its staff decided not to take immediate action. The 
company stated that it is investigating past practices to improve security. 

Source: http://www.reuters.com/article/2014/Q3/13/us-target-breach- 
idUSBREA2C14F20140313 

9. March 13, Reuters - (National) Watchdog faults U.S. Justice Dept on mortgage 
fraud prosecutions. The U.S. Department of Justice’s Inspector General concluded 
that the department and FBI did not adequately prioritize mortgage fraud cases and 
found significant deficiencies in the department’s ability to accurately report its efforts 



- 3 - 



to fight mortgage fraud. 

Source: http://www.reuters.com/article/2014/03/13/usa-iustice-mortgagefraud- 
idUSL2N0MA0TB20 140313 



10. March 13, USA Today - (National) Lions Gate charged by SEC of misleading 
investors. Hollywood studio Lions Gate agreed to pay $7.5 million to settle U.S. 
Securities and Exchange Commission charges that the company improperly disclosed 
financial actions it used to ward off a takeover attempt by an investor in 2010. 

Source: http://www.usatodav.com/storv/monev/business/2014/03/13/lions-gate-sec- 
hunger-games/6370283/ 

11. March 13, Honolulu Star Advertiser - (Washington; Hawaii; California) Second 
alleged con man arrested in Waikiki scam. A Los Angeles man was arrested in 
Seattle March 1 1 on charges that he and another Californian allegedly used a skimming 
device in Waikiki, Hawaii, to collect users’ data from an ATM and cause financial 
losses exceeding $20,000. 

Source: http://www.staradvertiser.com/news/breaking/20140313 Second con man arr 
ested for Waikiki ATM skimming scheme.html 
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Transportation Systems Sector 

12. March 14, Los Angeles Times - (California) Road rage suspected in deadly car-to- 
car 210 Freeway shooting. Authorities are investigating a deadly car-to car shooting 
that left one man dead and forced the closure of the 210 Freeway in Sylmar for over 2 
hours March 14 while police searched for evidence. 

Source: http://www.latimes.com/local/lanow/la-me-ln-driver-shot-210-freeway- 
201403 14,0,5920052.story 

13. March 14, Reuters - (Pennsylvania) Tire blows on plane about to take off from 
Philadelphia airport. 149 passengers and 5 crew members were evacuated from a U.S. 
Airways flight at a Philadelphia airport by emergency chute after a tire blew and the 
nose gear collapsed during takeoff and the pilot aborted takeoff. Two people were 
taken to a local hospital for minor injuries. 

Source: http://news.msn.com/us/tire-blows-on-plane-about-to-take-off-from- 
philadelphia-airport 

14. March 13, KGO 7 San Francisco - (California) Stockton Tunnel reopens after water 
line break repaired. A busted 4-inch water line March 13 forced authorities to close 
the Stockton Tunnel in San Francisco for about 8 hours until repairs were completed. 
Source: http://abclocal.go.com/kgo/storv?section=news/local/san francisco&id=946537 
0 

For additional stories, see items 1 
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Food and Agriculture Sector 

15. March 12, U.S. Department of Labor - (Georgia) US Department of Labor's OSHA 
cites Schwan's, staffing agency and service company for serious health and safety 
violations; $264,360 in lines. Schwan’s Global Supply Chain Inc., was cited by the 
Occupational Safety and Health Administration for 32 serious safety and health 
violations at the company’s Atlanta facility, with proposed fines totaling $185,700. 
Cimco Refrigeration Inc., and Adecco USA Inc., which provide services at the Atlanta 
facility were cited for 18 safety and health violations and fined a total of $78,660 
Source: https://www.osha.gov/pls/oshaweb/owadisp.show document?p table=NEWS 
RELEASES &p id=25728 

16. March 12, Associated Press - (Nebraska) Man dies in grain bin accident in Clay 
County city of Edgar. Fire crews and volunteers from Edgar, Nebraska, worked 
March 1 1 to remove com from a grain bin where a man became trapped and died while 
scooping com. 

Source: http ://w w w .omaha. com/article/20 1 403 1 2/NEW S/ 1 403 19572/1707 
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Water and Wastewater Systems Sector 

17. March 14, Baltimore Sun - (Maryland) Hundreds lose water service after Baltimore 
water main breaks. Two separate water main issues March 13 and March 14 in the 
Baltimore area caused about 800 customers to lose water service, shut down roads, and 
forced several schools to shut down for the day. 

Source: http://www.baltimoresun.com/news/maryland/baltimore-citv/bs-md-ci-water- 
main-breaks-20140314,0,2338487.story 

18. March 13, South Jersey Times - (New Jersey) Woodbury shuts down well over 
drinking water concerns. The town of Woodbury shut down a water well as a 
precaution, joining the towns of Paulsboro, and West Deptford after testing by plastics 
plant Solvay Solexis revealed a contamination risk. 

Source: http://www.ni.com/gloucester- 

county/index.ssf/2014/03/woodburv shuts down well over drinking water concerns. 
html 



For another story, see item 14 
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Healthcare and Public Health Sector 

19. March 13, Detroit News - (Michigan) Harper University Hospital patient records 
stolen. The Detroit Medical Center announced March 13 that the personal information 
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of 1,087 Harper University Hospital patients was stolen after being informed of a 
security breach by the West Bloomfield Police Department. Personal documents were 
discovered in the possession of a former employee during an identity theft 
investigation. 

Source: http ://w w w .detroitnews .com/article/20 1 403 1 3/B IZ/303 13011 3/Harper- 
University-Hospital-patient-records-stolen 

For another story, see item 22 
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Government Facilities Sector 

20. March 14, WTOP 103.5 FM Washington, D.C. - (Virginia) Stomach virus closes 
Alexandria school after 230 get sick. John Adams Elementary School in Alexandria 
closed March 14 after about 230 students and staff members came down with a 
stomach illness. The school was cleaned and disinfected and classes were scheduled to 
resume March 17. 

Source: http://www.wtop.com/134/3580889/Stomach-virus-closes-Alexandria-school- 
230-sick 



21. March 13, KHON 2 Honolulu - (Hawaii) Defense contractor pleads guilty to leaking 
secrets. A defense contractor living in Honolulu and working at the U.S. Pacific 
Command pleaded guilty March 13 in connection to willfully retaining and 
communicating national defense information to an unauthorized person. The contractor 
admitted emailing classified information related to joint training and planning sessions 
between the U.S. and the Republic of Korea to his girlfriend, who was in the U.S. on a 
student visa. 

Source: http://khon2.com/2014/03/13/defense-contractor-pleads-guiltv-to-leaking- 
secrets/ 



22. March 12, University of California, San Francisco - (California) Computer theft at 
UC San Francisco. The University of California, San Francisco (UCSF) notified 9,986 
individuals March 12 of a January burglary involving unencrypted desktop computers 
from the UCSF Family Medicine Center at Fakeshore. Authorities are investigating the 
theft of the computers which contained personal information including Social Security 
numbers. 

Source: https://www.ucsf.edu/news/2014/03/112556/computer-theft-uc-san-francisco 
For another story, see item 17 
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Emergency Services Sector 

Nothing to Report 
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Information Technology Sector 

23. March 14, Help Net Security - (International) Pwn20wn 2014 ends, $850k 
distributed to successful hackers. The second day of the Pwn20wn 2014 security 
competition March 14 resulted in two vulnerabilities in Chrome being discovered, in 
addition to vulnerabilities in Internet Explorer, Firefox, Safari, and Adobe Flash that 
were revealed March 13. A total of $850,000 was awarded to security researchers over 
the course of the competition. 

Source: http://www.net-securitv.org/secworld.php?id=16524 

24. March 13, IDG News Sendee - (International) Phishing campaign targets Google 
Docs, Drive users. Symantec researchers identified a phishing campaign targeting 
users of Google Drive that uses a fake login page hosted on Google servers and served 
over Secure Sockets Fayer (SSF), making the campaign potentially more convincing 
than most phishing attempts. 

Source: http://www.computerworld.com/s/article/9246950/Phishing campaign targets 
Google Docs Drive users 

25. March 13, IDG News Service - (International) Adobe patches a critical flaw in 
Shockwave Player. Adobe released a patch March 13 for its Shockwave Player to 
address a critical memory corruption vulnerability that could lead to arbitrary code 
execution. 

Source: http://www.computerworld.com/s/article/9246930/Adobe patches a critical fl 
aw in Shockwave Player 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

Nothing to Report 
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Commercial Facilities Sector 



26. March 13, Green Bay Press-Gazette - (Wisconsin) Ashwaubenon apartment fire 
displaces 30; none hurt. Officials are investigating a March 13 fire at the Creekwood 
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Apartments in Ashwaubenon that damaged 12 units and displaced 30 residents. 

Source: http://www.greenbavpressgazette.com/article/20140313/GPG0101/303130316/ 

Ashwaubenon-apartment-fire-displaces-30-none-hurt 

27. March 14, WBAL 11 Baltimore - (Maryland) Police investigate 11 burglaries after 
Odenton apartment fire. Burglars stole firearms and electronics from at least 11 units 
at the Apartments at 7 Oaks in Odenton March 12-13 after residents were vacated and 
the complex was secured following a March 7 fire that damaged the building. 

Source: http://www.wbaltv.com/news/police-investigate-burglaries-after-apartment- 
fire/24968922 

28. March 14, WTKR 3 Norfolk - (Virginia) Beach Walmart evacuated after gas leak. A 
Virginia Beach Walmart was evacuated for several hours March 14 due to elevated 
carbon monoxide (CO) levels after a suspected gas leak from a HVAC rooftop unit. 
Crews worked to secure the unit, and the store was ventilated to lower the CO levels. 
Source: http://wtkr.com/2014/03/14/beach-walmart-evacuated-after-gas-leak/ 
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Dams Sector 

29. March 13, Quad City Times - (Illinois) Ice jams, levee failure create minor flooding 
in Q-C area. An ice jam likely caused a 75 foot-wide levee breach on the Green River 
March 12 and created some flooding east of Colona, which caused the Green River 
Road to be temporarily closed. 

Source: http://qctimes.com/weather/ice-iams-levee-fail-create-rninor- 
flooding/article 6163el2c-f25b-5c32-a209-ebb9b9777177.html 
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NTAS 



NO ACTIVE ALERTS 
www.DHS.gov/alerts 



Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support@govdeliverv.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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